Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade git-lfsUpgrade critUpgrade podman-gvproxyUpgrade go-toolsetUpgrade golang-miscUpgrade fuse-overlayfsUpgrade python3-criuUpgrade toolbox-testsUpgrade podman-testsUpgrade slirp4netnsUpgrade golang-docsUpgrade aardvark-dnsUpgrade libslirpUpgrade golang-srcUpgrade golangUpgrade netavarkUpgrade criuUpgrade buildah-testsUpgrade udicaUpgrade buildahUpgrade runcUpgrade podman-dockerUpgrade podman-catatonitUpgrade skopeoUpgrade delveUpgrade containers-commonUpgrade criu-develUpgrade skopeo-testsUpgrade golang-testsUpgrade libslirp-develUpgrade golang-raceUpgrade podmanUpgrade python3-podmanUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade conmonUpgrade criu-libsUpgrade podman-pluginsUpgrade toolboxUpgrade container-selinuxUpgrade golang-binUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade crunUpgrade grafana-pcp | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-kr-pty-develUpgrade golang-testsUpgrade golang-raceUpgrade golistUpgrade golang-github-gorilla-context-develUpgrade golang-miscUpgrade golang-srcUpgrade go-rpm-macrosUpgrade go-srpm-macrosUpgrade runcUpgrade golang-docsUpgrade golangUpgrade golang-googlecode-sqlite-develUpgrade go-filesystemUpgrade golang-binUpgrade golang-googlecode-net-develUpgrade golang-github-godbus-dbus-develUpgrade golang-sharedUpgrade runc-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade go-rpm-templatesUpgrade golist-debuginfoUpgrade golang-github-gorilla-mux-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-srcUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golangUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golist-debugsourceUpgrade golist-debuginfoUpgrade golistUpgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golang-docs | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade podman-gvproxyUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade conmonUpgrade delve-debugsourceUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade toolboxUpgrade podman-testsUpgrade golangUpgrade golang-raceUpgrade git-lfs-debugsourceUpgrade conmon-debugsourceUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade crun-debuginfoUpgrade golang-srcUpgrade grafana-debuginfoUpgrade golang-miscUpgrade buildahUpgrade buildah-debugsourceUpgrade criu-libsUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade delve-debuginfoUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade skopeo-debugsourceUpgrade buildah-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade git-lfs-debuginfoUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade git-lfsUpgrade golang-docsUpgrade slirp4netns-debuginfoUpgrade crun-debugsourceUpgrade grafana-pcpUpgrade container-selinuxUpgrade aardvark-dnsUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debugsourceUpgrade grafana-pcp-debuginfoUpgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade critUpgrade delveUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade golang-binUpgrade toolbox-testsUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade criu-debugsourceUpgrade runcUpgrade podman-dockerUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade golang-testsUpgrade podman-remoteUpgrade grafanaUpgrade buildah-tests | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade podman-remoteUpgrade buildahUpgrade golang-binUpgrade aardvark-dnsUpgrade golang-testsUpgrade podman-catatonitUpgrade python3-podmanUpgrade golang-docsUpgrade golang-raceUpgrade grafana-pcpUpgrade criuUpgrade udicaUpgrade fuse-overlayfsUpgrade golangUpgrade critUpgrade golang-miscUpgrade netavarkUpgrade podman-dockerUpgrade podmanUpgrade skopeoUpgrade buildah-testsUpgrade runcUpgrade containernetworking-pluginsUpgrade criu-develUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade containers-commonUpgrade libslirp-develUpgrade git-lfsUpgrade container-selinuxUpgrade crunUpgrade podman-pluginsUpgrade golang-srcUpgrade go-toolsetUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade conmonUpgrade grafanaUpgrade delveUpgrade criu-libsUpgrade python3-criu | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade runcUpgrade podman-plugins-debuginfoUpgrade toolboxUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade git-lfs-debugsourceUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade udicaUpgrade podman-dockerUpgrade podman-debuginfoUpgrade criu-develUpgrade delve-debugsourceUpgrade skopeo-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirpUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade critUpgrade podman-debugsourceUpgrade git-lfsUpgrade golang-docsNo solution existsUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade podman-testsUpgrade grafana-pcp-debuginfoUpgrade toolbox-debuginfoUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade python3-criuUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade slirp4netnsUpgrade golang-srcUpgrade buildahUpgrade golang-testsUpgrade criu-libsUpgrade toolbox-testsUpgrade podman-catatonitUpgrade golang-miscUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade grafana-pcpUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade fuse-overlayfsUpgrade golangUpgrade libslirp-develUpgrade grafana-debuginfoUpgrade containernetworking-pluginsUpgrade crun-debuginfoUpgrade criuUpgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade git-lfs-debuginfoUpgrade cockpit-podmanUpgrade python3-podmanUpgrade containers-commonUpgrade netavarkUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade buildah-testsUpgrade fuse-overlayfs-debugsource | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade criuUpgrade libslirpUpgrade libslirp-debugsourceUpgrade delveUpgrade delve-debugsourceUpgrade git-lfs-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade grafana-pcp-debuginfoUpgrade criu-libs-debuginfoUpgrade git-lfs-debuginfoUpgrade git-lfsUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade libslirp-develUpgrade criu-libsUpgrade golang-binUpgrade grafana-debuginfoUpgrade criu-debugsourceUpgrade critUpgrade python3-criuUpgrade go-toolsetUpgrade grafana-pcpUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade golang | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.17Upgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-docUpgrade go1.18Upgrade go1.18-opensslUpgrade go1.17-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.18Upgrade golang-1.18-goUpgrade golang-1.16-srcUpgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.16-goUpgrade golang-1.13-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub